[openssl/openssl] 1579f5: sslapi: use correct fipsmodule.cnf

Pauli noreply at github.com
Fri Apr 21 16:05:44 UTC 2023


  Branch: refs/heads/openssl-3.1
  Home:   https://github.com/openssl/openssl
  Commit: 1579f5ab5b2f98a9b00b3fb0d5ab2d68c81e719b
      https://github.com/openssl/openssl/commit/1579f5ab5b2f98a9b00b3fb0d5ab2d68c81e719b
  Author: Pauli <pauli at openssl.org>
  Date:   2023-04-21 (Fri, 21 Apr 2023)

  Changed paths:
    M test/recipes/90-test_sslapi.t

  Log Message:
  -----------
  sslapi: use correct fipsmodule.cnf

The SSL API tests copies fipsmodule.cnf and modifies it.  Unfortunately, it
grabbed the wrong instance of this file.

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20762)

(cherry picked from commit bc5d9502c5f3c726e42ef72263a4076fd48300d6)


  Commit: 032afb4effec98f18c0712969b923ddb2bc59947
      https://github.com/openssl/openssl/commit/032afb4effec98f18c0712969b923ddb2bc59947
  Author: Pauli <pauli at openssl.org>
  Date:   2023-04-21 (Fri, 21 Apr 2023)

  Changed paths:
    M test/recipes/30-test_evp_data/evprand.txt

  Log Message:
  -----------
  test: update evprand tests in line with pedantic FIPS policy

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20762)

(cherry picked from commit cf3d5c2fbaf734731b1ccbd3a84e21eeb6d0f30d)


  Commit: 313849eeb71e49a80b912cc79ae0a78f83d6fefb
      https://github.com/openssl/openssl/commit/313849eeb71e49a80b912cc79ae0a78f83d6fefb
  Author: Pauli <pauli at openssl.org>
  Date:   2023-04-21 (Fri, 21 Apr 2023)

  Changed paths:
    M test/recipes/30-test_evp_data/evpkdf_tls12_prf.txt

  Log Message:
  -----------
  test: update TLS PDF tests in line with pedantic FIPS policy

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20762)

(cherry picked from commit e07999369a13a29243f34cbd5d24281783984299)


  Commit: 3375ae41847c133d1ce731bc8fd367d12b0049fd
      https://github.com/openssl/openssl/commit/3375ae41847c133d1ce731bc8fd367d12b0049fd
  Author: Pauli <pauli at openssl.org>
  Date:   2023-04-21 (Fri, 21 Apr 2023)

  Changed paths:
    M test/helpers/ssl_test_ctx.c
    M test/helpers/ssl_test_ctx.h
    M test/ssl-tests/30-extended-master-secret.cnf
    M test/ssl-tests/30-extended-master-secret.cnf.in
    M test/ssl_test.c

  Log Message:
  -----------
  test: update ssl_new tests in line with pedantic FIPS policy

Add a new option to the `test' section of SSL test data structure.
This contains a space separated list of version checks, all of which must
pass.

Note that the version checks are as they as because:

- 3.1.0 doesn't have mandatory EMS support, so it can run the old tests.
- 3.1.1 (& later) will have mandatory EMS support, so they can't run them.

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20762)

(cherry picked from commit 4454c20f026bb47f158ea05c207f143c81d674d8)


  Commit: b236fd27caa54cbd1d04204a1fbdb6689c51dbc0
      https://github.com/openssl/openssl/commit/b236fd27caa54cbd1d04204a1fbdb6689c51dbc0
  Author: Pauli <pauli at openssl.org>
  Date:   2023-04-21 (Fri, 21 Apr 2023)

  Changed paths:
    M test/recipes/00-prep_fipsmodule_cnf.t
    M util/mk-fipsmodule-cnf.pl

  Log Message:
  -----------
  fips: setup the FIPS provider in pendantic mode for testing

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20762)

(cherry picked from commit c04e78f0c69201226430fed14c291c281da47f2d)


Compare: https://github.com/openssl/openssl/compare/d9e22a585d09...b236fd27caa5


More information about the openssl-commits mailing list